From 678636ff6f6d0aea59eea72258082868e1670a23 Mon Sep 17 00:00:00 2001
From: Dmitry Starkov <21260939+starkdmi@users.noreply.github.com>
Date: Fri, 9 Oct 2026 13:21:19 +0300
Subject: [PATCH] Pin cargo-bundle to 0.11.0 for the menubar app bundle

---
 packaging/scripts/build-menubar-app.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/packaging/scripts/build-menubar-app.sh b/packaging/scripts/build-menubar-app.sh
index 65f0a29..637df73 100755
--- a/packaging/scripts/build-menubar-app.sh
+++ b/packaging/scripts/build-menubar-app.sh
@@ -10,8 +10,12 @@ X64_TARGET="x86_64-apple-darwin"
 
 cd "${ROOT}"
 
-if ! command -v cargo-bundle >/dev/null 2>&1; then
-  cargo install cargo-bundle --locked
+# Pinned: cargo-bundle 0.12.0 dropped the `hardened_runtime` key under
+# [package.metadata.bundle.macos] and fails the build; 0.11.0 is what every
+# shipped release was bundled with.
+CARGO_BUNDLE_VERSION="0.11.0"
+if ! cargo-bundle --version 2>/dev/null | grep -q "cargo-bundle ${CARGO_BUNDLE_VERSION}"; then
+  cargo install cargo-bundle --version "${CARGO_BUNDLE_VERSION}" --locked --force
 fi
 
 has_target() {